Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: mSXMOKwpyH68Dv9YQxlUw5joL7GiQapcNLmhHzLsDxA=
Subject key identifier: 08:E0:1D:65:41:0B:81:78:11:7F:BD:40:1C:F5:9F:23:83:77:D5:83
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 01A0DB044FBC1DC2855A9FAF44455F8FE84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 00:01:27 +0000
Manifest this update: Sat 26 Sep 2026 00:01:27 +0000
Manifest next update: Sun 27 Sep 2026 00:01:27 +0000
Files and hashes: 1: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (hash: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY=)
2: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: azLaXMbf/sKUf5svQN4dHFz/8Q5wqVqwjHaAAPgQhhE=)
3: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (hash: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:4f:bc:1d:c2:85:5a:9f:af:44:45:5f:8f:e8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Sep 26 00:01:27 2026 GMT
Not After : Sep 27 00:01:27 2026 GMT
Subject: CN=08e01d65410b8178117fbd401cf59f238377d583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:cd:ef:3f:61:6e:09:23:8c:12:e2:3a:8a:
4b:8c:b1:1e:45:cf:74:96:49:1c:4b:29:9f:79:d4:
a9:a4:3b:e3:ca:4a:a1:b8:f7:5e:c4:d8:d3:54:60:
9e:2e:d3:72:47:45:83:fe:9a:9e:3c:d5:90:20:8e:
96:01:13:9a:00:80:6c:e2:b2:6f:db:90:83:ce:d7:
22:96:9e:91:99:86:f6:64:c8:27:3e:fe:d5:c9:aa:
58:2b:56:9a:10:91:45:9c:e9:70:ad:f1:2b:38:55:
79:41:c2:ee:05:6b:c9:5b:9d:7b:0a:9f:ee:d8:a4:
bb:e1:a4:46:6d:30:2d:0d:1e:4b:1e:97:42:96:bc:
86:83:4d:a9:e3:1f:dc:6e:70:cd:83:26:52:29:df:
65:36:58:3b:ef:c6:97:fe:07:a6:6b:c4:0b:a1:33:
c5:6d:b9:7c:fe:51:65:b3:bd:75:cf:27:4e:e0:21:
9a:6d:7c:c0:cc:1b:79:9a:68:0b:4d:ca:46:32:6f:
ba:f4:5a:f5:f7:c7:63:98:d5:d7:a3:67:36:34:44:
14:bc:47:32:c3:2e:f5:10:d1:c3:03:43:12:72:41:
55:4e:e1:6e:2b:e5:e8:08:01:ec:dc:4d:e5:6a:97:
82:22:a6:15:7b:5e:98:1f:56:01:39:e7:86:77:1e:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E0:1D:65:41:0B:81:78:11:7F:BD:40:1C:F5:9F:23:83:77:D5:83
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:8f:70:16:31:a7:2a:30:14:37:a8:66:93:57:3d:16:4d:
54:61:3d:ce:3b:fa:62:c7:e4:81:d3:bc:d9:b4:94:d3:34:86:
de:e6:00:f5:17:4d:54:82:6d:f4:c2:1c:13:f4:d2:68:c0:78:
cd:a8:f8:d2:f9:d7:ae:13:53:f0:ef:57:25:bb:f6:94:44:9e:
f0:df:bd:f0:85:62:bc:9b:54:57:cb:66:da:45:76:0a:cc:80:
bd:74:7c:3e:81:92:e9:42:53:f9:16:47:b2:1b:18:1f:f9:3a:
e4:4b:10:f4:df:08:c0:76:f6:80:df:98:ae:00:0f:1b:6c:1b:
17:d3:44:de:41:03:01:bb:eb:92:14:d1:4c:d0:6f:9e:c5:8d:
50:c5:29:0a:14:45:ad:ac:45:23:2f:7c:40:a0:a9:dc:36:a3:
23:16:2b:fe:51:47:7e:ca:67:5d:56:19:57:d2:e5:c4:b5:f3:
fd:49:66:81:8a:8f:6b:7d:79:44:45:0a:c3:06:0d:c2:f0:c1:
22:d4:04:ba:3d:16:a0:80:54:0c:5d:80:c5:fe:5e:d4:a6:d8:
07:e3:78:a3:47:31:7c:d0:e0:5a:da:0f:43:bb:25:dc:3c:c8:
c3:ec:5c:62:19:3e:3b:53:a5:a0:b1:11:1f:98:ff:32:12:6c:
98:b4:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:32:28 2026 by rpki-client